Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
File: 2F20ECAE554211EF82D40732C4F9AE02.roa (raw, json)
Hash identifier: e6hwM0dYbBNpOl3iexa5a16uqfeIZ/QyfHI0cTq8Oq8=
Subject key identifier: 8D:9E:C1:10:BF:0C:B1:30:22:04:E1:9A:53:8E:17:E2:A5:86:EC:A1
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3596
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
Signing time: Fri 10 Oct 2025 08:58:08 +0000
ROA not before: Fri 10 Oct 2025 08:58:07 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55824
IP address blocks: 14.139.0.0/16 maxlen: 16
14.139.0.0/19 maxlen: 19
14.139.0.0/23 maxlen: 23
14.139.3.0/24 maxlen: 24
14.139.4.0/24 maxlen: 24
14.139.5.0/24 maxlen: 24
14.139.6.0/23 maxlen: 23
14.139.8.0/24 maxlen: 24
14.139.9.0/24 maxlen: 24
14.139.10.0/24 maxlen: 24
14.139.11.0/24 maxlen: 24
14.139.12.0/24 maxlen: 24
14.139.13.0/24 maxlen: 24
14.139.14.0/24 maxlen: 24
14.139.16.0/20 maxlen: 20
14.139.32.0/19 maxlen: 19
14.139.32.0/24 maxlen: 24
14.139.33.0/24 maxlen: 24
14.139.34.0/24 maxlen: 24
14.139.35.0/24 maxlen: 24
14.139.36.0/24 maxlen: 24
14.139.37.0/24 maxlen: 24
14.139.38.0/24 maxlen: 24
14.139.39.0/24 maxlen: 24
14.139.40.0/21 maxlen: 24
14.139.48.0/20 maxlen: 24
14.139.64.0/18 maxlen: 24
14.139.128.0/19 maxlen: 19
14.139.128.0/20 maxlen: 24
14.139.144.0/21 maxlen: 24
14.139.152.0/22 maxlen: 22
14.139.156.0/23 maxlen: 23
14.139.158.0/24 maxlen: 24
14.139.159.0/24 maxlen: 24
14.139.160.0/19 maxlen: 19
14.139.160.0/24 maxlen: 24
14.139.161.0/24 maxlen: 24
14.139.162.0/24 maxlen: 24
14.139.163.0/24 maxlen: 24
14.139.164.0/22 maxlen: 22
14.139.168.0/21 maxlen: 21
14.139.176.0/21 maxlen: 21
14.139.184.0/24 maxlen: 24
14.139.185.0/24 maxlen: 24
14.139.186.0/24 maxlen: 24
14.139.187.0/24 maxlen: 24
14.139.188.0/22 maxlen: 22
14.139.192.0/19 maxlen: 19
14.139.192.0/20 maxlen: 20
14.139.192.0/24 maxlen: 24
14.139.193.0/24 maxlen: 24
14.139.194.0/24 maxlen: 24
14.139.195.0/24 maxlen: 24
14.139.196.0/23 maxlen: 23
14.139.198.0/24 maxlen: 24
14.139.199.0/24 maxlen: 24
14.139.200.0/21 maxlen: 24
14.139.208.0/20 maxlen: 20
14.139.208.0/21 maxlen: 21
14.139.208.0/23 maxlen: 23
14.139.208.0/24 maxlen: 24
14.139.210.0/24 maxlen: 24
14.139.211.0/24 maxlen: 24
14.139.212.0/23 maxlen: 23
14.139.212.0/24 maxlen: 24
14.139.213.0/24 maxlen: 24
14.139.214.0/23 maxlen: 23
14.139.216.0/21 maxlen: 21
14.139.216.0/24 maxlen: 24
14.139.217.0/24 maxlen: 24
14.139.218.0/23 maxlen: 23
14.139.220.0/24 maxlen: 24
14.139.221.0/24 maxlen: 24
14.139.222.0/24 maxlen: 24
14.139.223.0/24 maxlen: 24
14.139.224.0/19 maxlen: 19
14.139.224.0/24 maxlen: 24
14.139.225.0/24 maxlen: 24
14.139.226.0/24 maxlen: 24
14.139.227.0/24 maxlen: 24
14.139.228.0/24 maxlen: 24
14.139.229.0/24 maxlen: 24
14.139.230.0/24 maxlen: 24
14.139.231.0/24 maxlen: 24
14.139.232.0/24 maxlen: 24
14.139.233.0/24 maxlen: 24
14.139.234.0/24 maxlen: 24
14.139.235.0/24 maxlen: 24
14.139.236.0/24 maxlen: 24
14.139.237.0/24 maxlen: 24
14.139.238.0/24 maxlen: 24
14.139.239.0/24 maxlen: 24
14.139.240.0/24 maxlen: 24
14.139.241.0/24 maxlen: 24
14.139.242.0/24 maxlen: 24
14.139.243.0/24 maxlen: 24
14.139.244.0/24 maxlen: 24
14.139.245.0/24 maxlen: 24
14.139.246.0/23 maxlen: 24
14.139.248.0/24 maxlen: 24
14.139.249.0/24 maxlen: 24
14.139.250.0/24 maxlen: 24
14.139.251.0/24 maxlen: 24
14.139.252.0/23 maxlen: 23
14.139.253.0/24 maxlen: 24
14.139.254.0/24 maxlen: 24
14.139.255.0/24 maxlen: 24
180.149.48.0/20 maxlen: 20
180.149.48.0/24 maxlen: 24
180.149.49.0/24 maxlen: 24
180.149.51.0/24 maxlen: 24
180.149.52.0/24 maxlen: 24
180.149.54.0/24 maxlen: 24
180.149.55.0/24 maxlen: 24
180.149.56.0/24 maxlen: 24
180.149.59.0/24 maxlen: 24
180.149.60.0/24 maxlen: 24
180.149.61.0/24 maxlen: 24
180.149.62.0/24 maxlen: 24
180.149.63.0/24 maxlen: 24
2405:8a00::/32 maxlen: 32
2405:8a00:a::/48 maxlen: 48
2405:8a00:14::/48 maxlen: 48
2405:8a00:15::/48 maxlen: 48
2405:8a00:1a::/48 maxlen: 48
2405:8a00:aa::/48 maxlen: 48
2405:8a00:bb::/48 maxlen: 48
2405:8a00:2002::/48 maxlen: 48
2405:8a00:200a::/48 maxlen: 48
2405:8a00:2021::/48 maxlen: 48
2405:8a00:2039::/48 maxlen: 48
2405:8a00:2063::/48 maxlen: 48
2405:8a00:2072::/48 maxlen: 48
2405:8a00:2077::/48 maxlen: 48
2405:8a00:2078::/48 maxlen: 48
2405:8a00:2090::/48 maxlen: 48
2405:8a00:20c3::/48 maxlen: 48
2405:8a00:20d9::/48 maxlen: 48
2405:8a00:20da::/48 maxlen: 48
2405:8a00:20db::/48 maxlen: 48
2405:8a00:20dc::/48 maxlen: 48
2405:8a00:20dd::/48 maxlen: 48
2405:8a00:20de::/48 maxlen: 48
2405:8a00:20df::/48 maxlen: 48
2405:8a00:20e0::/48 maxlen: 48
2405:8a00:20e1::/48 maxlen: 48
2405:8a00:20e2::/48 maxlen: 48
2405:8a00:20e3::/48 maxlen: 48
2405:8a00:20e5::/48 maxlen: 48
2405:8a00:20e6::/48 maxlen: 48
2405:8a00:20e7::/48 maxlen: 48
2405:8a00:20e8::/48 maxlen: 48
2405:8a00:20f3::/48 maxlen: 48
2405:8a00:210c::/48 maxlen: 48
2405:8a00:2110::/48 maxlen: 48
2405:8a00:217e::/48 maxlen: 48
2405:8a00:21a5::/48 maxlen: 48
2405:8a00:21b1::/48 maxlen: 48
2405:8a00:21b3::/48 maxlen: 48
2405:8a00:21b4::/48 maxlen: 48
2405:8a00:21b5::/48 maxlen: 48
2405:8a00:21bd::/48 maxlen: 48
2405:8a00:4001::/48 maxlen: 48
2405:8a00:400d::/48 maxlen: 48
2405:8a00:4014::/48 maxlen: 48
2405:8a00:401d::/48 maxlen: 48
2405:8a00:401e::/48 maxlen: 48
2405:8a00:401f::/48 maxlen: 48
2405:8a00:4020::/48 maxlen: 48
2405:8a00:4021::/48 maxlen: 48
2405:8a00:6013::/48 maxlen: 48
2405:8a00:6016::/48 maxlen: 48
2405:8a00:601c::/48 maxlen: 48
2405:8a00:602e::/48 maxlen: 48
2405:8a00:602f::/48 maxlen: 48
2405:8a00:6035::/48 maxlen: 48
2405:8a00:6036::/48 maxlen: 48
2405:8a00:6037::/48 maxlen: 48
2405:8a00:6038::/48 maxlen: 48
2405:8a00:6039::/48 maxlen: 48
2405:8a00:603a::/48 maxlen: 48
2405:8a00:8001::/48 maxlen: 48
2405:8a00:8016::/48 maxlen: 48
2405:8a00:801b::/48 maxlen: 48
2405:8a00:801c::/48 maxlen: 48
2405:8a00:801f::/48 maxlen: 48
2405:8a00:8020::/48 maxlen: 48
2405:8a00:8021::/48 maxlen: 48
2405:8a00:8022::/48 maxlen: 48
2405:8a00:8024::/48 maxlen: 48
2405:8a00:8027::/48 maxlen: 48
2405:8a00:802f::/48 maxlen: 48
2405:8a00:8031::/48 maxlen: 48
2405:8a00:8032::/48 maxlen: 48
2405:8a00:8033::/48 maxlen: 48
2405:8a00:8035::/48 maxlen: 48
2405:8a00:8036::/48 maxlen: 48
2405:8a00:a001::/48 maxlen: 48
2405:8a00:a00d::/48 maxlen: 48
2405:8a00:a01b::/48 maxlen: 48
2405:8a00:a01d::/48 maxlen: 48
2405:8a00:a027::/48 maxlen: 48
2405:8a00:a031::/48 maxlen: 48
2405:8a00:a048::/48 maxlen: 48
2405:8a00:a04b::/48 maxlen: 48
2405:8a00:a04c::/48 maxlen: 48
2405:8a00:a052::/48 maxlen: 48
2405:8a00:a054::/48 maxlen: 48
2405:8a00:a056::/48 maxlen: 48
2405:8a00:c012::/48 maxlen: 48
2405:8a00:c01a::/48 maxlen: 48
2405:8a00:c01b::/48 maxlen: 48
2405:8a00:c01c::/48 maxlen: 48
2405:8a00:c01f::/48 maxlen: 48
2405:8a00:c020::/48 maxlen: 48
2405:8a00:c021::/48 maxlen: 48
2405:8a00:c022::/48 maxlen: 48
2405:8a00:c023::/48 maxlen: 48
2405:8a00:c024::/48 maxlen: 48
2405:8a00:c025::/48 maxlen: 48
2405:8a00:c026::/48 maxlen: 48
2405:8a00:c027::/48 maxlen: 48
2409::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 15:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13718 (0x3596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 10 08:58:07 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=68e8ca9f-c687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:e1:77:30:19:6d:da:55:3f:ac:6b:79:23:
63:90:7b:6f:39:87:a7:dd:98:07:30:de:bb:2d:10:
ec:2a:40:73:64:fe:b1:0e:d8:3a:b7:40:1e:9c:be:
a6:3f:1b:06:5d:86:fa:00:93:ae:5c:b2:4e:1b:cd:
5a:ac:2a:00:0b:87:f1:cb:6a:70:67:60:10:67:ce:
46:e1:0e:4c:ac:12:74:48:4e:42:c2:e7:59:f0:5e:
ff:0e:12:4d:a7:57:17:c5:75:d7:bd:0c:04:77:75:
68:e3:bc:66:d0:b8:d8:b6:be:91:db:e5:70:da:b0:
c1:38:5a:d1:a5:b2:c4:74:9d:c4:2d:89:92:e4:79:
66:04:d6:76:2f:e4:20:32:91:ee:71:07:69:51:8b:
56:ff:5f:83:57:67:83:4b:82:cc:95:5d:cb:fe:c2:
f9:92:e4:dc:d1:6b:57:8c:30:5b:df:e8:4f:da:a7:
a8:d3:60:60:e3:e1:1b:13:34:7e:07:ec:de:58:6d:
bd:56:1b:21:12:60:82:fb:56:2e:39:3b:d9:d2:87:
14:6f:a2:bb:19:1a:53:18:b2:62:bb:92:64:1e:26:
08:38:ed:62:f3:4a:48:e4:3a:ae:87:70:1b:cb:1b:
e3:96:9e:20:80:b9:03:e0:f0:01:d9:d3:63:55:ff:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:C1:10:BF:0C:B1:30:22:04:E1:9A:53:8E:17:E2:A5:86:EC:A1
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.139.0.0/16
180.149.48.0/20
IPv6:
2405:8a00::/32
2409::/28
Signature Algorithm: sha256WithRSAEncryption
23:e2:96:99:5b:e3:92:87:af:b2:1f:2c:1a:7d:66:07:2c:e6:
cf:cd:10:32:06:af:f3:12:f8:48:72:32:0b:80:7d:b3:d1:20:
02:c5:01:ec:10:35:12:ee:a5:71:af:25:5f:ca:32:a7:da:24:
7b:c5:ff:93:64:01:da:b1:41:1e:61:a4:1f:18:31:87:09:4d:
4c:8a:47:df:67:12:5c:4e:8d:93:3b:0f:1c:10:4d:e1:9c:be:
6c:a6:df:39:71:b4:a5:12:77:64:fa:a0:03:d9:97:54:fd:d6:
ad:bc:b1:a8:d9:72:53:53:e9:d9:ad:b8:0b:b9:c4:08:fe:87:
3f:33:70:62:45:af:49:4e:66:f3:bd:df:d2:e8:22:29:8f:1b:
de:64:de:11:ff:9b:fe:2b:55:52:d4:35:0c:db:7f:13:86:68:
55:77:53:fc:1d:52:8c:69:91:86:18:7e:fb:e7:de:46:6d:42:
07:15:87:6e:c1:eb:94:ce:f7:fb:64:39:d1:59:ef:71:d0:d9:
b8:bd:63:47:01:bf:2b:c1:60:3e:b6:4d:ed:53:d4:ab:bb:e2:
db:86:29:10:8b:62:59:8d:03:dc:29:6a:3f:c7:57:39:da:7f:
00:be:2a:16:e2:49:d2:95:b9:df:09:43:d5:33:9b:c9:0f:b8:
7a:9c:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:44:07 2025 by rpki-client